Holiday scams no longer rely solely on blatant advertisements or easily identifiable websites. Fake accommodations, identity theft, personalized messages, and off-platform payment requests can now be amplified by AI-generated content.
The risk does not mean that every attractive advertisement or unusual message is fraudulent. However, it does require verifying the identity of the sender and the payment method before sending money or personal documents.
Summary
Holiday scams: artificial intelligence primarily strengthens the fraudulent activities
Generative artificial intelligence tools enable the rapid production of credible texts, fake documents, artificial images, and voice imitations. Interpol confirms that these technologies facilitate the impersonation of trusted individuals or organizations in various forms of fraud.
Feedzai also describes the use of voice cloning, deepfakes, and personalized phishing messages. These techniques can make a scam attempt appear more professional and reduce the visibility of previously easy-to-spot clues, such as glaring errors or incoherent wording.
According to the specialized press, these methods are now being discussed in the travel sector to create fake profiles, reproduce the identity of a host or send messages resembling those of a booking platform.
However, an important distinction must be maintained. The use of artificial intelligence in online fraud is documented, but the available sources do not allow for a precise measurement of the proportion of holiday scams committed using these tools in France.
Fake hosting remains a central scenario
One method involves posting an advertisement for a property that doesn't exist, is unavailable, or belongs to someone else. Photographs and a description can be copied from a legitimate advertisement and then reused with fake contact information.
Another technique involves impersonating a real owner or establishment. The fraudster uses the name, address, and images of the property, but replaces the contact information or payment details.
Cybermalveillance.gouv.fr reminds the public that these scams can be used to steal money, but also to obtain identity documents and personal information. These documents can then be used in other fraudulent activities.
A reverse image search can help identify a photograph used in multiple listings. However, it is not enough to authenticate a property, especially when the images have been altered or artificially generated.
The message received after booking may be fraudulent
A legitimate listing doesn't protect against all scams. A property owner's, hotel's, or traveler's account can be hacked. The fraudster then has access to real information about a booking and can send a highly convincing payment request.
A sudden change in bank details, a request for additional payment, or an invitation to continue the conversation on another messaging platform should trigger an independent verification.
The correct approach is to contact the establishment or platform directly using a phone number or address found on their official website. Do not use contact information contained in the suspicious message, as this may lead back to the fraudster.
Leaving the booking platform increases the risk
Scammers frequently try to shift the conversation and payment away from the service used to make the booking. They may claim a discount, a technical problem, or the need to quickly confirm the stay.
A direct transfer does not automatically constitute fraud. However, it becomes risky when requested at the last minute, to a new beneficiary, or in contradiction with the initially agreed terms.
The U.S. Federal Trade Commission classifies requests for payment exclusively via wire transfer, gift card, or cryptocurrency as a major red flag in travel scams. In France, Cybermalveillance.gouv.fr recommends immediately alerting your bank in case of wire transfer fraud in order to try to stop the transaction or request the return of funds.
This process does not guarantee a refund. When payment has been authorized by the victim, the chances of recovery depend in particular on the method used, the response time, and the circumstances of the transaction.
A very low offer is not enough to prove a scam
A price significantly lower than the market rate is a warning sign, but not proof. Prices can vary depending on the dates, cancellation policy, location, and level of service.
The comparison should be based on equivalent services. You must check the exact address, dates, amenities, taxes, cancellation policy, and the seller's identity.
The absence of legal notices, a web address slightly different from the brand's, or a recently created domain can all raise suspicions. The padlock icon displayed in the browser only indicates that the connection is encrypted. It does not guarantee that the site belongs to a legitimate company.
The five checks to be carried out before any payment
The first check involves the website address. A replaced letter, an extra hyphen, or an unusual extension can indicate a site imitating a known platform.
The second step involves verifying the existence of the accommodation on several consistent sources. The address, telephone number, photographs, and name of the establishment must match.
The third point concerns the contact person. A call to the official number of the hotel, agency, or owner allows for confirmation of an unusual request without using the potentially compromised channel.
The fourth point concerns payment. The beneficiary's details and the requested payment terms must be compared with those provided at the time of booking.
The fifth step is to keep all evidence: advertisement, correspondence, invoice, bank details, website address, and proof of payment. This information will be necessary to alert the platform, the bank, and the authorities.
The figure of 6% of French people remains insufficiently documented
The publication that broke this story claims that 6% of French people have already been victims of a vacation rental scam, with an average loss of €1,600. These figures are attributed to a 2024 OpinionWay study.
They are not included as established data in this article because the original publication, its sponsor, the sample size and the exact wording of the questions could not be corroborated in a publicly available OpinionWay study.
This lack of confirmation does not prove that the figures are false. It simply prevents them from being presented as unqualifiedly verified data.
What to do after paying a fraudster
The victim must contact their bank immediately. For a wire transfer, every minute counts when it's still possible to block the transaction or request a refund.
Next, you should keep all available information and report the advertisement to the website or platform in question. This step can lead to the removal of fraudulent content and limit the number of new victims.
A complaint can be filed with the police or the gendarmerie. Certain scams committed entirely online can also be reported through THESEE. The 17Cyber service also provides a diagnosis and guidance tailored to the specific situation.
In the case of an unauthorized bank debit, the procedure differs from that applicable to a voluntary payment made under the influence of a fraudster. The bank must be fully informed of the circumstances of the transaction.
Tourism professionals must secure their own channels
Hotels, agencies, owners, and platforms can have their names, photographs, or contact information copied into fake listings. They can also be affected by the hacking of email or business accounts.
Prevention includes, in particular, two-factor authentication, account monitoring, limiting internal access, and clearly informing customers about the payment methods actually used.
Professionals should also explicitly state that no changes to bank details will be requested without a verification process. An official page dedicated to authorized payments and contacts can help travelers identify suspicious messages.
In this context, security is not solely based on technology. A clear procedure, an accessible contact person, and a rapid response in case of identity theft reduce the risk for both the company and its customers.
Article published on July 20, 2026. Operating methods evolve regularly and recommendations must be adapted to the type of payment and the fraud encountered.
Sources
- https://www.infotravel.fr/actualites/les-nouvelles-arnaques-qui-ciblent-les-vacanciers-2/
- https://www.cybermalveillance.gouv.fr/tous-nos-contenus/fiches-reflexes/arnaques-location-immobiliere
- https://www.cybermalveillance.gouv.fr/tous-nos-contenus/fiches-reflexes/que-faire-en-cas-de-fraude-au-virement-ou-au-faux-rib
- https://www.cybermalveillance.gouv.fr/tous-nos-contenus/fiches-reflexes/fraude-carte-bancaire
- https://www.service-public.gouv.fr/particuliers/vosdroits/N31138
- https://www.feedzai.com/blog/genai-fraud-prevention/
- https://www.feedzai.com/blog/deepfake-fraud/
- https://www.interpol.int/News-and-Events/News/2026/INTERPOL-UNODC-global-summit-ends-with-call-to-action-against-fraud-surge
- https://consumer.ftc.gov/consumer-alerts/2026/06/how-avoid-travel-scam-summer
- https://consumer.ftc.gov/articles/avoid-scams-when-you-travel
👉 Access all our tourism reports, statistics and analyses on Tourisme Stats.
➡️ Check out our full report on B2B Tourism to discover the key trends, figures and strategies for 2026.
👉 Stay informed about business tourism trends: subscribe to InfosTourisme Inside .
📘 Also check out our practical pages for tourism professionals .
📩 Send your press releases .
